CVE-2006-0940

CVE-2006-0940 affects ShoutLIVE 1.1.0, specifically the savesettings.php script. The vulnerability arises because user-defined variables are written directly into settings.php without proper sanitization, enabling remote attackers to execute arbitrary PHP code. This is described as a PHP code exe...

CVE-2004-0940

Buffer overflow in the gettag function in modinclude for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI XSSI documents that trigger a length calculation error...

CVE-2004-0940

CVE-2004-0940 is a confirmed vulnerability: a buffer overflow in mod_include.get_tag() affects Apache 1.3.x up to 1.3.32, allowing local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error. The impact is ...

CVE-2004-0940

Buffer overflow in the gettag function in modinclude for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI XSSI documents that trigger a length calculation error...

CVE-2003-0940

Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. dot dot sequences in a URL...

CVE-2003-0940

SAP DB web-tools (web server component sqlfopenc) contains a directory traversal vulnerability that allows remote reading of arbitrary files via dot-dot sequences in URLs. Affected: SAP DB web-tools prior to 7.4.03.30; attack surface includes the web-server administration pages and default servic...

CVE-2002-0940

This CVE concerns domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54, where the software does not use Operator Card Set protected keys when the user requests them if the Operator Card Set has not been generated. The outcome is a lower protection level than the user-specified module protecti...

CVE-2002-0940

domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54 does not use Operator Card Set protected keys when the user requests them but does not generate the Operator Card Set, which results in a lower protection level than specified by the user module protection only...

CVE-2001-0940

Technical details about CVE-2001-0940 are not publicly available in the provided documents; monitor for updates.

CVE-2001-0940

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name...

CVE-2001-0940

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name...

CVE-2000-0940

Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. dot dot attack on the "name" or "display" parameter...

CVE-2000-0940

Metertek pagelog.cgi is affected by a directory traversal vulnerability (CVE-2000-0940). A remote attacker can read arbitrary files by supplying a .. sequence through the name or display parameter. Public documents confirm the CGI module is installed and vulnerable, with the issue described as al...

CVE-1999-0940

Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages...

CVE-1999-0940

Vulnerability in the mutt mail client: a buffer overflow when processing MIME messages can allow a remote, unauthenticated attacker to execute commands. Connected documents identify the affected software (mutt) and the root cause (buffer overflow via crafted MIME input) with high impact. There is...